Data processing

Roles

Your firm decides why and how its inspection data is used, so your firm is the controller. Siteseal processes that data on your firm’s instructions to provide the service, and is the processor.

We process the data listed on the Privacy page: engineer profiles, photos, voice notes, transcripts, findings, signatures, recipients and usage.

Sub-processors

These services process data for us. We list them here and update this page before we add or replace one.

Vloud: Hosts the website, API and worker, PostgreSQL database and private native object storage; Processing regions not independently confirmed
Anthropic: Drafts findings and summaries from your notes and checks finding photos; Processing regions not independently confirmed
ElevenLabs: Transcribes voice notes using the selected speech-to-text service; no automatic fallback to another vendor; Processing regions not independently confirmed
Resend: Sends sign-in codes and account emails; Processing regions not independently confirmed
Sentry: Receives crash reports after names, notes, photos and contact details are removed; Processing regions not independently confirmed

Security measures

The safeguards built into the service today:

Encryption in transit: the app and the website use HTTPS only.
Private storage: photos, voice notes and PDFs are held in a private Vloud storage namespace and are reached through links that expire.
Separation between firms: every request is checked against the firm it belongs to, and another firm’s record answers as if it did not exist.
Audit chain: every change to a report is recorded with a time and a hash that links to the one before, so a change to history can be detected.
Signed reports are immutable: a correction is a new revision, never an edit.
Crash reports are scrubbed of names, notes, photos, email addresses and phone numbers before they leave the server or the phone.

Breach notice

If we confirm that your firm’s data was exposed, we notify the firm’s account owner without undue delay and meet applicable legal notification requirements. We explain what happened, what data was involved and what we are doing about it.

Deletion

Deleting the account removes the profile, drafts, photos, voice notes and PDFs at once. Signed reports stay as records with their audit trail, and their links say the report was removed by its author. Data can be exported first, under Account, Privacy and data.

Contact

For a data processing question or agreement request, email hello@digitalcubic.ae or use the public WhatsApp contact below.